tiangong-kb-textbook-search

SUSPICIOUS: the skill’s stated purpose is coherent, but its trust model is weak. It runs an unpinned external CLI via `npx @latest`, forwards credentials to that CLI, and allows endpoint override through `api_base_url`; these are meaningful supply-chain and data-flow risks even though the functional scope is otherwise narrow and aligned.